U.S. Department of Justice 



Federal Bureau of Investigation 

Washington, D.C. 20535 


ESQ. MARCIA HOFMANN 
ELECTRONIC FRONTIER FOUNDATION 
SUITE 650 

1875 CONNECTJCUT AVENUE. NORTHWEST 
WASHINGTON. DC 20009 


June 4, 2007 


Subjects: System DCS-3000 and Red Hook 
FOlPA No. 1056287- 000 and FOlPA No, 1056307-1 


Dear Ms. Hofmann. : 

The enclosed documents were reviewed under the Freedom of Information/Privacy Acts (FOlPA), Title 5, 
United States Code, Section 552/552a. Deletions have been made to protect information which is exempt from disclosure, 
with the appropriate exemptions noted on the page next to the excision. In addition, a deleted page information sheet was 
inserted in the file to indicate where pages were withheld entirely. The exemptions used to withhold information are marked 


below and explained on the enclosed Form OPCA-16a: 

Section 552 Section 552a 

^(b)(1) □(b)(7)(A) D(d)(5) 

s(b)(2) □(b)(7)(B) n(j)(2) 

□(b)(3) ® (b)(7)(C) n(k)(1 ) 

^(b)(7)(D) D(k)(2) 

^(b)(7)(E) D(k)(3) 

□(b)(7)(F) D(k)(4) 

□(b)(4) □(b)(8) D(k)(5) 

s(b)(5) n(b)(9) a(k)(6) 

K(b)(6) n(k)(7) 


112 page(s) were reviewed and 103 page(s) are being released. 

□ Document(s) were located which originated with, or contained information concerning other 
Government agency(ies) [OGA]. This information has been: 

□ referred to the OGA for review and direct response to you. 

□ referred to the OGA for consultation. The FBI will correspond with you regarding this 
information when the consultation is finished. 


□ You have the right to appeal any denials in this release. Appeals should be directed in 
writing to the Director, Office of Information and Privacy, U.S. Department of Justice, 1425 
New York Ave., NW, Suite 11050, Washington, D.C. 20530-0001 within sixty days from the 
date of this letter. The envelope and the letter should be clearly marked “Freedom of Information 
Appeal” or “Information Appeal.” Please cite the FOlPA number assigned to your request so that it 
may be easily identified. 



□ The enclosed material Is from the main Investigative file(s) In which the subject(s) of your request was 
the focus of the investigation. Our search located additional references, in files relating to other 
individuals, or matters, which may or may not be about your subject(s). Our experience has shown, 
when ident, references usually contain information similar to the information processed in the main file(s). 
Because of our significant backlog, we have given priority to processing only the main investigative file(s). 
If you want the references, you must submit a separate request for them in writing, and they will be 
reviewed at a later date, as time and resources permit, 

H See additional information which follows. 


Sincerely yours. 


David M, Hardy 
Section Chief 
Record/Information 
Dissemination Section 
Records Management Division 


Enclosure(s) 


Please be advised that this is the first interim release as ordered by the court on May 7, 2007 for 
documents concerning electronic surveillance systems known as DCS-3000 and Red Hook. 



EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)(1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to such Executive order; 

(b)(2) related solely to the internal personnel rules and practices of an agency; 

(b)(3) specifically exempted from disclosure by statute (other than section 552b of this title), provided that such statute(A) requires that the 
matters be withheld from the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for 
withholding or refers to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra- agency memorandums or letters which would not be available by law to a party other than an agency in litigation 

with the agency; 

(b)(6) personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement 

records or information ( A ) could be reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person 
of a right to a fair trial or an impartial adjudication, ( C ) could be reasonably expected to constitute an unwarranted invasion of personal 
privacy, ( D ) could reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or 
authority or any private institution which furnished information on a confidential basis, and, in the case of record or information compiled 
by a criminal law enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security 
intelligence investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law 
enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such 
disclosure could reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or 
physical safety of any individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

WW geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce 

crime or apprehend criminals; 

(k) (l) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign 

policy, for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or 

privilege under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity 
would be held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant 
to the authority of Title 18, United States Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistical records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 
employment or for access to classified information, the disclosure of which would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidence; 

(k)(6) testing or examination material used to determine individual qualifications for appointment or promotion in Federal Government service the 
release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person 
who furnished the material pursuant to a promise that his/her identity would be held in confidence. 
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Why are you telling me this? 


Case Agents and Analysts are requesting 

but do not have 
access to the DCS-3000 
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How do I access it? 


Using Internet Explorer 






Picture of login screen 
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Choosing a Carrier 
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How do I access it? 

Using Internet Explorer on^^^| 
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2006 Annual Conference 



Telecommunications Intercept and Collection Technology Unit 


DCS-5000 
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Configuration Management 

- Software Standardization 

- Security Configuration 

Technology 

- One Way Push 

- Windows WS 
-Archive Index Reader 


One Way Push 


- Interface between DCS-3000 and DCS-5000 


Initial Testing 
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New 


[deployment -T 


Further deployment pending results of next phase 
testing 
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Telecommunications Intercept and Collection Technology Unit 


Tech Tips 
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Refresher 
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New DCS-3000 Client Features 
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Reports 
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Concatenate Save 
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Concatenate Save 





Best Practices 


Discontinue use of ^^^^^connection to 
DCS 3000 systems 

Determine within your office what you 
consider evidence from the DCS 3000 
system 

Use inherent DCS 3000 Save Functions 

PROVIDE TICTU WITH GUIDANCE! 
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Telephone Application 
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Collection 
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Telephone Application 

Push To Talk Upload 
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Select date range of records to concatenate. 





Telephone Application 

Push To Talk Upload - Trace Files 
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Telephone Application 

Push To Talk Upload - TA Upload 
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Telephone Application 

Push To Talk Upload - TA Upload 
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Telephone Application 

Push To Talk Upload - TA Upload 
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Push To Talk Upload - TA Upload 
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Telephone Application 

Push To Talk Upload - TA Upload 
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C4. DCS-3000 Training 
Ooistions^' 


3 

3 



pg-2 



New DCS-3000 Client Features 
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• Select a Target Window 

• Reports Generation 

• Concatenate Save Function 
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Reports 



O^E«*T»OM^L TEOHHOI^OO V OIV|«tO*i « » ,1F CT Hi ^LmW O'n 




Reports 



pg-8 








FBI# 














FBI® 







Concatenate Save 

^T^Concatenat^unc^^ 

The concatenate file is save d into a 
File extension for this file is 









Best Practices 
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Discontinue use of ^^^^|connection to 
DCS 3000 systems 

Determine within your office what you 
consider evidence from the DCS 3000 
system 

Use inherent DCS 3000 Save Functions 
• PROVIDE TICTU WITH GUIDANCE! 
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New DCS-3000 Training 

Computer-based training (CBT) 

CD based, 4 hour course 

Created for entry-levei introduction to 
software operation 

Deveiopment completed, currentiy being 
field tested 

Watch TICTU web site for announcement 
on availability 
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TICTU East Coast Conference 


This is not a 
deletion 
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Advanced Carrier Solutions 
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Advanced Carrier Solutions 
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/ Telecommunications Intercept and Collection Technology t 


Advanced Telephony Unit 



Wireless Intercept and Tracking Team 
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Advanced Telephony Unit 

Wireless Intercept and Tracking Team 


racking 
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Advanced Telephony Unit ^ ^ 

Wireless Intercept and Tracking Team 


Surveillance Van Wireless Integration 
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Advanced Telephony Unit W ^ 

Wireless Intercept and Tra cking Team 
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Key Points of Phase 0 
■ TheDCS3000^ 
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Advanced Telephony Unit .<< w 

Wireless Intercept and Tracking Team 


Phase 0 



Surveillance Van 
Cell tower 


Phase 2 



‘ Surveillance Van Latest target heanng 

^ Cell tower Recant target bearing 

^ Ceil sector 

Range 
Target 
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DCS-3000 Enhancements 



Report Function 
View Log Files 


Tracker Application 
BackTrack Application 



DCS-3000 Enhancements 


Report Function 

Now activated, end user can generate 
“Ten Day” reports 





DCS-3000 Enhancements 


View Log Files 

Provides the end user with a shortcut to 
directly access DCS-3000 log files 



View Log Files 









TdrqeL for Bull*^ Eye Query ? 
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DCS'3000 Enhancements 


Tracker ADOlication 


^ The end user can configure the mapping 
feature to run automaticatly^^l 




Tracker Application 
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BackTrack Application 
Similar to Tracker 


BackTrack Application 











BackTrack Application 







DCS-3000 Enhancements 
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Atlas 



DCS-3000/5000 Integration 


The “One Way Push” 
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^ DCS-3000/5000 Integration |bm^^| 

The ‘‘One Way Push" 

Genesis 

Task Force formed after 9/11 to ensure 
security needs of FBI defined and implemented 

Includes testing, certification and accreditation 

Encompasses all ELSUR equipment and 




DCS-3000/5000 Integration 

The ‘'One Way Push” 
Certification & Accreditation Status 


DCS-3000 


DCS-5000 

DCS-6000 


IN PROGRESS 
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IN PROGRESS 


FUTURE 
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DCS-3000/5000 Integration 

Configuration for Criminal 



Call Content (CCC) Call Data (CDC) 
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DCS-3000/5000 Integration 




Call Content (CCC) Call Data (CDC) 



DCS-3000/5000 Integration 




pg-6 




r t-iTU 








DCS-3000/5000 Integration 
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T&S Validation Workshop Summary Notes 
Collections and Surs-eillance Line-of-Busiiiess 



Date: March 17, 2006 

Division(s) In Attendance: Operational Technology Division (OTD) 
Meeting Location: Quantico, VA 
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ion.^ Unit : - Company: 
FBL oTpP 


FBI/OIPP 


FBI/OTD 


FBI/OTD 


FBl/O'ID 


OIPP^EAU - Bearing? pint 


OIPP/EAU - BearingPoint 


OIPP/EAU - BearingPoint 


OIPP/EAU - BearingPoint 


OIPP/EAU - BearingPoint 


OIPP/EAU - Keane 


OIPP/ITSP Keane 



b6 

b7C 


Purpose: 

• A workshop to review and validate the findings related to OTD currently presented 
within the FBI Enterprise Architecture (EA) Transition and Sequencing (T&S) Plan. 

To discuss and obtain any transition planning related inputs as put together by OTD 
for inclusion and reflection within the FBI T&S Plan. 

• A significant portion of OTD’s mission systems are clandestine technologies (Clan 
Tech), are not considered IT, and do not touch the FBI Enterprise. A focus of the FBI 
EA Program should be what OTD systems could interface with the FBI IT 
environment. 

Mission/Buaines s Trends & j^i orities 

• Currently OTC j H b7E 

and criminal content on removable media: OTP | I 

dependency with Lab Division’s Laboratory Information Management System 

(LIMS). 

• OTD needs the OCIO’s help with the Electronic Surveillance Data Management__^ 

System (EDMS) and the current Service Level Agreements (SLA) J ~| 
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T&S Validation Workshop Summary Notes 
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Key Initjatlves 

• Technical Response Unit (TRU) Communications System 


Sefvice Needs ValMltitioii / Updates 

• Digital Media 

• Evidence Handling 

• Storage 

• Search 

b2 

Current IT Plarming b7E 

• For th e long-term OT P is initialing a Division- level Transitio n^ConsolidatiQn Plan | ~~\ 


Tnireithtlil\ Matrix Ltuduk-s 





Wm\ 




■ In\^st!TKint " E SpQfiflptijig 

. ■■ ..Type- :- 4 : - Divisioil;; " 
(il kno^n) 

InvCi'vlment N jnie : ;; -S 


W;' 

. 

Ch^ge 

1 \ 

[Noi UTJj] 
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Discussion Points: 

• Collectioi i I not records. OTD leverages “Non-traditional” 

IT, the “stuff’ collected by its systems is not owned by the Bureau; it is owned by the 
US Courts. 

• OTD desires to have the collections purchase process distinct and separate from the 

standard IT requisition process. OTD needs to have a specialized process for 
procuring special needs IT equipment/systems. (Require special exceptions to the IT 
Standard Products List) 2 

• Collections has its own component architecture ^ 

• The Enterprise Architecture Unit ( EAUi nccd.s to better d efine the OTD budget line 

items so reports do not ov er-inllatel IC ollections related items 

should not be on a funded 


Action Items: 

• i:>uring Ihe workshop OTD made ihe fo Mowing nndales: 


I 


Corrected several system names including - Digital Collection System (DCS) 
is the common name for DCS 3000. 3000. and 6 000 (DCS is redundant). DCS 
50QQ is s ynonymous ^vitl ^ t ^cdundantV. and 


fs not an OTD sponsored system . 

owing up wit! i i ] for edits t o the EDI Traceability 

' I tor the OTD T ransition Plan | | 


The EAU is foil 

Matrix ai^with[ ^ ^ 

I EAU is also following up with OTD on the status of the E-Rcquisition 
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OTD / Collection Architecture Meeting - March 17, 2006 
Summary Notes / Action Items 


Workshop discussion points 

• Need to include common EA terms in the read-ahead materials. OTD is especially 
interested in definitions for Information Technology (IT) and National Security System. 

o A significant portion of OTD's mission systems are clandestine technologies (ClanTech) 
and are not considered IT and do not touc h the FBI enterprise. The focus of the FBI EA 
program should be on those OTD syste m j 1 

o Collectior l ~^ nd do not produce records. 

• Need to add satellites to the list of OTD priority projects (Technical Response Unit (TRU) 
Communication System). 

• Need to better defir|e the OTD budget line items 

• OTD needs OCIO help with EDMS and the current service level agreements (SLA).| 

I I 


b2 
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Business Architecture 

• EDMS should be mapped to the BRM Intelligence Collection sub-functio 

• OTD is initiating a Division-level Transition /Consolidation 
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Services and Capabilities 

» O TD has service needs for st nrana s earch evid ence handling, and digital media, 
o [ criminal content on removable media, 

o OTD identified an evidence handling dependency with LD’s Laboratory Information 
Management System (LIMS). 
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T&S Findings and Recommendations 
• Need to compare OTD initiatives 


o_ See the Emerging Technology Bulletin Research Bulletin at 


1 


for 


1 


I r 




Action Items 

• Follow-up with ! [ for edits to the FBI Traceability Matrix. b2 

o DCS is the common name for DCS 3000, 5000, and 6000 (DCS redundant). b7E 
o DCS 5 OTO is synonymous wit H I 'edundantV 

o I | s not an OTD s ystem (determine the spon sor') . 

• Follow-up withi [ for the OTD Transition Plan I I 

• I [plans to visit OTD to gain a better understanding of where OTD systems 

' interrace witn tnq | 

• Follow-up with O l D on the status ot the h -Requisition initiative. 

• Follow-up with OTD on the break out of their IT budget line items vs Collections budget 
items. 
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Legacy Systems Certification Status Report 
November 8, 2002 


Green Team 


DCS 6000 

• In Accreditation Unit. 
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DCS 3000 (CALEA) 

• Awaiting System Owner corrective actions based on pre-eertification test results. 


• In Accreditation Unit. 
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• 
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? 1 

1 

• 1 
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Blue Team - 
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Awaiting testing results from test team. 


• Awaiting testing results from test team. 
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FBI HQ SACS 

• Certification package undergoing revisions 


• 
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